mirror of
https://github.com/hanzoai/jube-fork.git
synced 2026-10-30 18:33:33 +00:00
richard-churchman
c822a9b334
* Fixed NullReferenceException: Addressed a crash in JwtSecurityTokenHandler under .NET 9 caused by internal changes in cryptographic primitives and claim handling. * Migrated JWT Handling: Updated Jwt.CreateToken to use JsonWebTokenHandler with SecurityTokenDescriptor. The method now returns a string directly (formerly JwtSecurityToken). * Configured AddJwtBearer with UseSecurityTokenValidators = false to ensure end-to-end consistency using JsonWebTokenHandler. * Updated AutoMapper: Adjusted the instantiation signature to include a null logger following the upgrade from v13 to v15 (required to patch a CodeQL security vulnerability). Resolved high-severity DoS vulnerability GHSA-rvv3-g6hj-g44x (uncontrolled recursion) and fixed the new instantiation signature requiring a null logger.
336 lines
16 KiB
C#
336 lines
16 KiB
C#
/* Copyright (C) 2022-present Jube Holdings Limited.
|
|
*
|
|
* This file is part of Jube™ software.
|
|
*
|
|
* Jube™ is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License
|
|
* as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
|
|
* Jube™ is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty
|
|
* of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU Affero General Public License along with Jube™. If not,
|
|
* see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace Jube.Data.Repository
|
|
{
|
|
using System;
|
|
using System.Collections.Generic;
|
|
using System.Linq;
|
|
using System.Threading;
|
|
using System.Threading.Tasks;
|
|
using AutoMapper;
|
|
using Context;
|
|
using LinqToDB;
|
|
using log4net;
|
|
using Microsoft.Extensions.Logging.Abstractions;
|
|
using Poco;
|
|
using Reporting;
|
|
using Validation;
|
|
|
|
public class VisualisationRegistryDatasourceRepository
|
|
{
|
|
private readonly DbContext dbContext;
|
|
private readonly int tenantRegistryId;
|
|
private readonly string userName;
|
|
|
|
public VisualisationRegistryDatasourceRepository(DbContext dbContext, string userName)
|
|
{
|
|
this.dbContext = dbContext;
|
|
this.userName = userName;
|
|
tenantRegistryId = this.dbContext.UserInTenant.Where(w => w.User == this.userName)
|
|
.Select(s => s.TenantRegistryId).FirstOrDefault();
|
|
}
|
|
|
|
public VisualisationRegistryDatasourceRepository(DbContext dbContext, int tenantRegistryId)
|
|
{
|
|
this.dbContext = dbContext;
|
|
this.tenantRegistryId = tenantRegistryId;
|
|
}
|
|
|
|
public Task<VisualisationRegistryDatasource> GetByNameVisualisationRegistryIdAsync(string name, int visualisationRegistryId, CancellationToken token = default)
|
|
{
|
|
return dbContext.VisualisationRegistryDatasource
|
|
.FirstOrDefaultAsync(f =>
|
|
f.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& f.VisualisationRegistryId == visualisationRegistryId
|
|
&& (f.Deleted == 0 || f.Deleted == null)
|
|
&& f.Name.ToLower() == name.ToLower(), token);
|
|
}
|
|
|
|
public async Task<IEnumerable<VisualisationRegistryDatasource>> GetAsync(CancellationToken token = default)
|
|
{
|
|
return await dbContext.VisualisationRegistryDatasource
|
|
.Where(w => w.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& (w.Deleted == 0 || w.Deleted == null)).ToListAsync(token);
|
|
}
|
|
|
|
public async Task<IEnumerable<VisualisationRegistryDatasource>> GetByVisualisationRegistryIdOrderByIdAsync(
|
|
int visualisationRegistryId, CancellationToken token = default)
|
|
{
|
|
return await dbContext.VisualisationRegistryDatasource
|
|
.Where(w => w.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& w.VisualisationRegistryId == visualisationRegistryId &&
|
|
(w.Deleted == 0 || w.Deleted == null))
|
|
.OrderBy(o => o.Id).ToListAsync(token);
|
|
}
|
|
|
|
public async Task<IEnumerable<VisualisationRegistryDatasource>> GetByVisualisationRegistryIdOrderByPriorityAsync(
|
|
int visualisationRegistryId, CancellationToken token = default)
|
|
{
|
|
return await dbContext.VisualisationRegistryDatasource
|
|
.Where(w => w.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& w.VisualisationRegistryId == visualisationRegistryId &&
|
|
(w.Deleted == 0 || w.Deleted == null))
|
|
.OrderBy(o => o.Priority).ToListAsync(token);
|
|
}
|
|
|
|
public async Task<IEnumerable<VisualisationRegistryDatasource>> GetByVisualisationRegistryIdActiveOnlyAsync(
|
|
int visualisationRegistryId, CancellationToken token = default)
|
|
{
|
|
return await dbContext.VisualisationRegistryDatasource
|
|
.Where(w => w.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& w.VisualisationRegistryId == visualisationRegistryId
|
|
&& dbContext.VisualisationRegistryRole
|
|
.Where(r => r.VisualisationRegistryGuid == w.VisualisationRegistry.Guid
|
|
&& (r.Deleted == 0 || r.Deleted == null))
|
|
.Any(r => dbContext.RoleRegistry
|
|
.Where(rr => rr.Guid == r.RoleRegistryGuid)
|
|
.Any(rr => dbContext.UserRegistry
|
|
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
|
|
&& dbContext.VisualisationRegistryDatasourceRole
|
|
.Where(r => r.VisualisationRegistryDatasourceGuid == w.Guid
|
|
&& (r.Deleted == 0 || r.Deleted == null))
|
|
.Any(r => dbContext.RoleRegistry
|
|
.Where(rr => rr.Guid == r.RoleRegistryGuid)
|
|
.Any(rr => dbContext.UserRegistry
|
|
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
|
|
&& w.Active == 1
|
|
&& (w.Deleted == 0 || w.Deleted == null)).ToListAsync(token);
|
|
}
|
|
|
|
public Task<VisualisationRegistryDatasource> GetByIdAsync(int id, CancellationToken token = default)
|
|
{
|
|
return dbContext.VisualisationRegistryDatasource.FirstOrDefaultAsync(w
|
|
=> w.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& w.Id == id
|
|
&& (w.Deleted == 0 || w.Deleted == null), token);
|
|
}
|
|
|
|
public Task<VisualisationRegistryDatasource> GetByIdActiveOnlyAsync(int id, CancellationToken token = default)
|
|
{
|
|
return dbContext.VisualisationRegistryDatasource
|
|
.Where(w => w.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& dbContext.VisualisationRegistryRole
|
|
.Where(r => r.VisualisationRegistryGuid == w.VisualisationRegistry.Guid
|
|
&& (r.Deleted == 0 || r.Deleted == null))
|
|
.Any(r => dbContext.RoleRegistry
|
|
.Where(rr => rr.Guid == r.RoleRegistryGuid)
|
|
.Any(rr => dbContext.UserRegistry
|
|
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
|
|
&& dbContext.VisualisationRegistryDatasourceRole
|
|
.Where(r => r.VisualisationRegistryDatasourceGuid == w.Guid
|
|
&& (r.Deleted == 0 || r.Deleted == null))
|
|
.Any(r => dbContext.RoleRegistry
|
|
.Where(rr => rr.Guid == r.RoleRegistryGuid)
|
|
.Any(rr => dbContext.UserRegistry
|
|
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
|
|
&& w.Active == 1
|
|
&& w.Id == id
|
|
&& (w.Deleted == 0 || w.Deleted == null)).FirstOrDefaultAsync(token);
|
|
}
|
|
|
|
public async Task<VisualisationRegistryDatasource> InsertAsync(VisualisationRegistryDatasource model, CancellationToken token = default)
|
|
{
|
|
model.CreatedUser = userName ?? model.CreatedUser;
|
|
model.Guid = model.Guid == Guid.Empty ? Guid.NewGuid() : model.Guid;
|
|
model.CreatedDate = DateTime.Now;
|
|
model.Version = 1;
|
|
model.Id = await dbContext.InsertWithInt32IdentityAsync(model, token: token);
|
|
return model;
|
|
}
|
|
|
|
public async Task<VisualisationRegistryDatasource> InsertWithValidationAsync(VisualisationRegistryDatasource model, ILog log, CancellationToken token = default)
|
|
{
|
|
if (model.VisualisationRegistryId == null)
|
|
{
|
|
return model;
|
|
}
|
|
Dictionary<string, string> columns;
|
|
try
|
|
{
|
|
columns = await ValidateSeriesAsync(model.VisualisationRegistryId.Value, model.Command, log).ConfigureAwait(false);
|
|
}
|
|
catch (Exception e)
|
|
{
|
|
var sqlValidationFailed = new SqlValidationFailed(e.Message);
|
|
throw sqlValidationFailed;
|
|
}
|
|
|
|
model.CreatedUser = userName;
|
|
model.CreatedDate = DateTime.Now;
|
|
model.Version = 1;
|
|
model.Guid = model.Guid == Guid.Empty ? Guid.NewGuid() : model.Guid;
|
|
model.Id = await dbContext.InsertWithInt32IdentityAsync(model, token: token).ConfigureAwait(false);
|
|
|
|
await FillSeriesAsync(model.Id, columns, token);
|
|
|
|
return model;
|
|
}
|
|
|
|
public async Task<VisualisationRegistryDatasource> UpdateWithValidationAsync(VisualisationRegistryDatasource model, ILog log, CancellationToken token = default)
|
|
{
|
|
if (model.VisualisationRegistryId == null)
|
|
{
|
|
return model;
|
|
}
|
|
|
|
Dictionary<string, string> columns;
|
|
try
|
|
{
|
|
columns = await ValidateSeriesAsync(model.VisualisationRegistryId.Value, model.Command, log).ConfigureAwait(false);
|
|
}
|
|
catch (Exception e)
|
|
{
|
|
var sqlValidationFailed = new SqlValidationFailed(e.Message);
|
|
throw sqlValidationFailed;
|
|
}
|
|
|
|
var existing = dbContext.VisualisationRegistryDatasource
|
|
.FirstOrDefault(w => w.Id
|
|
== model.Id
|
|
&& (w.Deleted == 0 || w.Deleted == null)
|
|
&& (w.Locked == 0 || w.Locked == null));
|
|
|
|
if (existing == null)
|
|
{
|
|
throw new KeyNotFoundException();
|
|
}
|
|
|
|
model.Version = existing.Version + 1;
|
|
model.Guid = existing.Guid;
|
|
model.CreatedUser = userName;
|
|
model.CreatedDate = DateTime.Now;
|
|
|
|
await dbContext.UpdateAsync(model, token: token).ConfigureAwait(false);
|
|
|
|
var mapper = new Mapper(new MapperConfiguration(cfg =>
|
|
{
|
|
cfg.CreateMap<VisualisationRegistryDatasource, VisualisationRegistryDatasourceVersion>();
|
|
}, NullLoggerFactory.Instance));
|
|
|
|
var audit = mapper.Map<VisualisationRegistryDatasourceVersion>(existing);
|
|
audit.VisualisationRegistryDatasourceId = existing.Id;
|
|
|
|
await dbContext.InsertAsync(audit, token: token).ConfigureAwait(false);
|
|
|
|
await FillSeriesAsync(model.Id, columns, token);
|
|
|
|
return model;
|
|
}
|
|
|
|
private async Task FillSeriesAsync(int id, Dictionary<string, string> columns, CancellationToken token = default)
|
|
{
|
|
await dbContext.BeginTransactionAsync(token);
|
|
|
|
var visualisationRegistryDatasourceSeriesRepository = new VisualisationRegistryDatasourceSeriesRepository(dbContext);
|
|
await visualisationRegistryDatasourceSeriesRepository.DeleteByVisualisationRegistryDatasourceIdAsync(id);
|
|
|
|
foreach (var (key, value) in columns)
|
|
{
|
|
var visualisationRegistryDatasourceSeries = new VisualisationRegistryDatasourceSeries
|
|
{
|
|
VisualisationRegistryDatasourceId = id,
|
|
Name = key
|
|
};
|
|
|
|
switch (value)
|
|
{
|
|
case "integer":
|
|
case "bigint":
|
|
visualisationRegistryDatasourceSeries.DataTypeId = 2;
|
|
break;
|
|
case "double precision":
|
|
visualisationRegistryDatasourceSeries.DataTypeId = 3;
|
|
break;
|
|
default:
|
|
{
|
|
if (value.Contains("timestamp"))
|
|
{
|
|
visualisationRegistryDatasourceSeries.DataTypeId = 4;
|
|
}
|
|
else
|
|
{
|
|
visualisationRegistryDatasourceSeries.DataTypeId = value switch
|
|
{
|
|
"smallint" => 5,
|
|
"double precision[]" => 6,
|
|
_ => value.EndsWith("[]") ? 7 : 1
|
|
};
|
|
}
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
await dbContext.InsertAsync(visualisationRegistryDatasourceSeries, token: token);
|
|
await dbContext.CommitTransactionAsync(token);
|
|
}
|
|
}
|
|
|
|
private async Task<Dictionary<string, string>> ValidateSeriesAsync(int visualisationRegistryId, string sql, ILog log)
|
|
{
|
|
var visualisationRegistryParameterRepository = new VisualisationRegistryParameterRepository(dbContext);
|
|
var parameters =
|
|
await visualisationRegistryParameterRepository.GetByVisualisationRegistryIdOrderByIdAsync(visualisationRegistryId);
|
|
|
|
var parametersDefaultValues = new Dictionary<string, object>();
|
|
foreach (var parameter in parameters)
|
|
{
|
|
object defaultValue = parameter.DataTypeId switch
|
|
{
|
|
1 => "",
|
|
2 => 0,
|
|
3 => 0d,
|
|
4 => new DateTime(),
|
|
5 => true,
|
|
_ => ""
|
|
};
|
|
|
|
parametersDefaultValues.Add(parameter.Name.Replace(" ", "_"), defaultValue);
|
|
}
|
|
|
|
using var postgres = new Postgres(dbContext.ConnectionString, log);
|
|
return await postgres.IntrospectAsync(sql, parametersDefaultValues).ConfigureAwait(false);
|
|
}
|
|
|
|
public async Task DeleteAsync(int id, CancellationToken token = default)
|
|
{
|
|
var records = await dbContext.VisualisationRegistryDatasource
|
|
.Where(d => d.VisualisationRegistry.TenantRegistryId == tenantRegistryId
|
|
&& d.Id == id
|
|
&& (d.Locked == 0 || d.Locked == null)
|
|
&& (d.Deleted == 0 || d.Deleted == null))
|
|
.Set(s => s.Deleted, Convert.ToByte(1))
|
|
.Set(s => s.DeletedDate, DateTime.Now)
|
|
.Set(s => s.DeletedUser, userName)
|
|
.UpdateAsync(token);
|
|
|
|
if (records == 0)
|
|
{
|
|
throw new KeyNotFoundException();
|
|
}
|
|
}
|
|
|
|
public Task DeleteByTenantRegistryIdOutsideOfInstanceAsync(int tenantRegistryIdOutsideOfInstance, int importId, CancellationToken token = default)
|
|
{
|
|
return dbContext.VisualisationRegistryDatasource
|
|
.Where(d => d.VisualisationRegistry.TenantRegistryId == tenantRegistryIdOutsideOfInstance
|
|
&& (d.Deleted == 0 || d.Deleted == null))
|
|
.Set(s => s.ImportId, importId)
|
|
.Set(s => s.Deleted, Convert.ToByte(1))
|
|
.Set(s => s.DeletedDate, DateTime.Now)
|
|
.UpdateAsync(token);
|
|
}
|
|
}
|
|
}
|